📝 Executive Summary
Blockaid said an attacker tricked Jaredfromsubway.eth into approving fake trading routes, then used those approvals to drain WETH, USDC and USDT.
Jaredfromsubway.eth, Ethereum’s largest sandwich bot, lost $7.5 million in wrapped ether and stablecoins after a smart-contract exploit forced faulty approvals, a high-profile DeFi attack that could shake confidence in automated trading strategies.
The exploit drained $7.5M worth of WETH, USDC, and USDT from the bot. If the attacker sells the WETH, it could add short-term supply pressure on ETH/USD. The incident also damages confidence in Ethereum's DeFi ecosystem, potentially reducing demand for ETH as a gas token.
The drain of $7.5M in WETH may lead to selling pressure if the attacker converts to fiat or other assets, but the amount is small relative to daily ETH volume. The psychological impact on DeFi trust could weigh on sentiment short-term.
The exploit targeted a specific bot's approval logic; regular ETH addresses are not directly affected. However, it highlights the importance of reviewing token approvals.
A sandwich bot is an automated program that exploits price slippage on decentralized exchanges by placing transactions before and after a target trade, profiting from the price difference.
USDT was drained alongside other assets, but its peg to the dollar is robust and the sum involved does not threaten market stability. No material impact on USDT pricing or liquidity.
Highly unlikely. The drained USDT amount is insignificant relative to Tether's total supply and daily trading volume, so the peg remains secure.
Yes, the exploit did not compromise Tether's reserves or smart contract; it was an isolated loss from a DeFi bot's wallet.
USDC was drained from the bot, but the stablecoin's peg to the dollar remains intact. The event does not impact USDC's fundamentals, and the amount is negligible relative to total supply.
No, the drain occurred on an individual bot's balance. USDC's peg to the dollar is unaffected, and the amount represents a tiny fraction of circulating supply.
Only if the attacker's sale of USDC triggers temporary depegging on exchanges, but with $7.5M spread across multiple assets, the impact is negligible.
Blockaid said an attacker tricked Jaredfromsubway.eth into approving fake trading routes, then used those approvals to drain WETH, USDC and USDT.
Blockaid reported that an attacker exploited Jaredfromsubway.eth, tricking it into approving fake trading routes. This allowed the attacker to drain $7.5 million in wrapped ether (WETH), USDC, and USDT from the bot's addresses.
Sandwich bots like Jaredfromsubway.eth profit by preying on other traders' slippage and order flows. The irony lies in the bot itself being exploited through manipulated transaction approvals, turning the hunter into the prey.
The attacker crafted deceptive trading routes that caused the bot to approve token spending to malicious addresses. Once approvals were granted, the attacker transferred WETH, USDC, and USDT out of the bot's wallets.